Proof of Concept Scripts

Security Issues

6.14.06

• XSS with Hostname
• DNS spoofing with DHCP
• Clish escaping (shell access)
• Kill root processes (requires shell and web interface access)

Other Documentations

• Handling Firmware Images

Related Projects

• https://github.com/antoinealb/swisscom_centro_grande

Weblinks

• Swisscom Bug Bounty with "Rectified Security Gaps"
• s4mpl3d.com: Default admin password vulnerability in Swisscom-Routers "Centro grande"
• OpenWRT ticket #11727

Disclaimer

This ressources are provided for educational purpose only.